CVE-2025-68533
Published Dec 24, 2025Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes WC Builder wc-builder allows Stored XSS.This issue affects WC Build…
Vendor archive
hasthemes CVEs
Beta · best-effort96 CVEs tagged to vendor hasthemes — 6 Critical, 7 High, 83 Medium, 0 Low, 0 Unrated.
CVE-2025-64271
Published Nov 13, 2025Cross-Site Request Forgery (CSRF) vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a t…
CVE-2025-12493
Published Nov 4, 2025The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Local File Inclusion in…
- evidence mentions
- 6
- Buzz score
- 26.0
CVE-2025-11823
Published Oct 25, 2025The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button_…
- evidence mentions
- 3
- Buzz score
- 20.4
CVE-2025-58990
Published Sep 9, 2025Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems ShopLentor woolentor-addons allows Stored XSS.This issue affects Sho…
CVE-2025-8401
Published Jul 31, 2025The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.1 via the 'get_post_data…
CVE-2025-8151
Published Jul 31, 2025The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.9.1 via the 'save_block_css' function. Thi…
CVE-2025-8068
Published Jul 31, 2025The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to an improper capability check on the 'ajax_trash…
CVE-2025-7360
Published Jul 15, 2025The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path v…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2025-7341
Published Jul 15, 2025The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2025-7340
Published Jul 15, 2025The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valid…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2025-3775
Published Apr 25, 2025The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Server-Side Request For…
CVE-2025-1802
Published Mar 20, 2025The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘marker_title’, 'notification_content', and 'stt_button_text'…
- evidence mentions
- 6
- Buzz score
- 26.0
CVE-2025-1527
Published Mar 12, 2025The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to a Stored DOM-Based Cros…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2025-1261
Published Mar 8, 2025The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, an…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2025-26917
Published Mar 3, 2025Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes WP Templata wptemplata allows Reflected XSS.This issue affects WP T…
CVE-2024-12599
Published Feb 11, 2025The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and includin…
CVE-2024-12597
Published Feb 4, 2025The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'block_css' and 'inner_css' parameters in all versions up to,…
CVE-2025-24695
Published Jan 24, 2025Server-Side Request Forgery (SSRF) vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Server Side Request Forgery.This issue affects Extensions For CF7: from…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-51673
Published Nov 9, 2024Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Politic wp-politic allows DOM-Based XSS.This issue affects HT Pol…
CVE-2024-51682
Published Nov 4, 2024Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Builder – WordPress Theme Builder for Elementor ht-builder allow…
CVE-2024-49630
Published Oct 20, 2024Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems WP Education wp-education allows Stored XSS.This issue affects WP Ed…
CVE-2024-9538
Published Oct 11, 2024The ShopLentor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.8 via the 'render' function in includes/addons/wl_faq…
CVE-2024-8910
Published Sep 25, 2024The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render functio…
CVE-2024-8668
Published Sep 25, 2024The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site Scrip…
Showing 1-25 of 96 CVEsPage 1 of 4